3 ms·

I don't get that. The traffic is BLOCKED at first PoP by WAF / Firewall. Therefore NONE is hitting the backend usign Argo. *According to Cloudflare docs / websi

by nwrk 9y ago

I don't get that. The traffic is BLOCKED at first PoP by WAF / Firewall. Therefore NONE is hitting the backend usign Argo. *According to Cloudflare docs / website Why you are getting billed for something you are not using (attack is mitigated by Firewall which is paid separately - page rules) ? Can you please elaborate more. We been thinking to enable Argo too, but this is just strange experience you are describing. Thank you

vladr 9y ago
The attack looks like a layer 7 flood of HTTP requests with random but normal looking user agents. It is being mitigated using the firewall IP block in my specific case as the person is using a single specific dedicated machine. I was also pretty surprised to hear that these requests also count towards bandwidth billing.